conxius-enclave-sdk 2.0.11

Hardware-backed security primitives for the broader Conxian ecosystem. Provides high-integrity root of trust for security-sensitive wallet, signing, attestation, and policy flows.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

use crate::state::MerkleMountainRange;
use crate::ConclaveResult;
use serde::{Deserialize, Serialize};

/// Service for handling Merkle Mountain Range (MMR) operations.
pub struct MmrService {
    pub http_client: reqwest::Client,
    pub base_url: String,
}

#[derive(Debug, Serialize, Deserialize)]
pub struct MmrProofResponse {
    pub position: u64,
    pub root: String,
    pub proof: Vec<String>,
}

impl MmrService {
    pub fn new(base_url: String, http_client: reqwest::Client) -> Self {
        Self {
            base_url,
            http_client,
        }
    }

    /// Generates a local MMR proof.
    pub fn generate_local_proof(&self, data: &[u8], pos: u64) -> ConclaveResult<MmrProofResponse> {
        let mut mmr = MerkleMountainRange::new();
        mmr.append(data);

        let proof = mmr
            .generate_proof(pos)
            .map_err(crate::ConclaveError::CryptoError)?;

        Ok(MmrProofResponse {
            position: proof.pos,
            root: proof.mmr_root,
            proof: proof.proof_path,
        })
    }

    /// Fetches an MMR proof from the remote /v1/mmr-proof endpoint.
    pub async fn fetch_remote_proof(&self, node_id: &str) -> ConclaveResult<MmrProofResponse> {
        let url = format!("{}/v1/mmr-proof/{}", self.base_url, node_id);

        let response = self.http_client.get(&url).send().await.map_err(|e| {
            crate::ConclaveError::EnclaveFailure(format!("API Request failed: {}", e))
        })?;

        let proof = response
            .json::<MmrProofResponse>()
            .await
            .map_err(|e| crate::ConclaveError::CryptoError(format!("Invalid response: {}", e)))?;

        Ok(proof)
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_mmr_local_proof() -> crate::ConclaveResult<()> {
        let client = reqwest::Client::new();
        let service = MmrService::new("https://gateway.conxian-labs.com".to_string(), client);

        let data = b"conxian_block_data";
        let proof = service.generate_local_proof(data, 1)?;

        assert_eq!(proof.position, 1);
        assert!(!proof.root.is_empty());
        // For a single leaf, the proof path is empty
        assert!(proof.proof.is_empty());

        Ok(())
    }
}